Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [jetty-users] jetty 9.2.7 - SSLException when POST/GET methods are invoked
Hey Joakim,
  I am using, 1.8 (and also tried 1.7)

$ java -version

java version "1.8.0_45"

Java(TM) SE Runtime Environment (build 1.8.0_45-b14)

Java HotSpot(TM) 64-Bit Server VM (build 25.45-b02, mixed mode)


There is nothing that is run infront of jetty.


Thank you for your quick response.

Sesha


Date: Thu, 3 Sep 2015 14:08:32 -0700
From: joakim@xxxxxxxxxxx
To: jetty-users@xxxxxxxxxxx
Subject: Re: [jetty-users] jetty 9.2.7 - SSLException when POST/GET methods are invoked

Since you are running SSL with Jetty, you are running a non-expired Java JVM, right?
This is not optional, its a requirement when working with SSL (now TLS).
The myriad of bugs and vulnerabilities have forced many updates to SSL/TLS.
There are even updates to SSL/TLS because of the HTTP/2 spec that affects users not even using HTTP/2.
All of the major browsers (desktop and mobile) have updated for these changes.

Lets start with with that first, as these sort of errors are typically a result of an outdated/expired SSL/TLS layer.

Also, do you run anything in front of Jetty?

And what does HttpQueuedThreadPool do? (from that signature, it seems that the standard java.util.concurrent.ThreadPoolExecutor is probably similar)



Joakim Erdfelt / joakim@xxxxxxxxxxx

On Thu, Sep 3, 2015 at 1:52 PM, Sesha Shayan Nandyal <snandyal@xxxxxxxxxxx> wrote:
Hello,
   We are using jetty 9.2.7. When we call HTTP GET/POST methods, we get the following exception:
[ERROR]:Thread[HttpListener-17,5,main][delayed:false,suspends:0]:15-09-03T14:34:27.381-0600: javax.net.ssl.SSLException: Inbound closed before receiving peer's close_notify: possible truncation attack?
at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
at sun.security.ssl.SSLEngineImpl.closeInbound(SSLEngineImpl.java:1561)
at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.closeInbound(SslConnection.java:690)
at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.fill(SslConnection.java:532)
at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:227)
at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)
at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)
:
:


I have the following code for setting up ThreadPool
BlockingQueue blockingQueue = new BlockingArrayQueue(maxThreads);
QueuedThreadPool threadPool = new HttpQueuedThreadPool(maxThreads, minThreads, idleTimeout, blockingQueue);
_server = new Server(_threadPool);


What am I doing incorrect?


Thank you,
Sesha

_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users


_______________________________________________ jetty-users mailing list jetty-users@xxxxxxxxxxx To change your delivery options, retrieve your password, or unsubscribe from this list, visit https://dev.eclipse.org/mailman/listinfo/jetty-users

Back to the top